Text To Video Animation Ai
AdvisoryAudited by Static analysis on May 4, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can use or create a NemoVideo access token to make API requests on the user's behalf.
The skill uses a service token for authentication to the video-generation backend. This is expected for the service integration, and the artifact instructs not to expose the token.
Look for `NEMO_TOKEN` in the environment... Include `Authorization: Bearer <NEMO_TOKEN>`
Only install if you are comfortable giving the skill access to this service token; avoid sharing raw tokens in chat and revoke or rotate the token if no longer needed.
Documents, images, prompts, or media provided for animation may be uploaded to NemoVideo's cloud service.
The skill sends prompts and uploaded files to an external cloud API for rendering. This is aligned with the purpose, but user content leaves the local environment.
This skill connects to a cloud processing backend... **Upload**: POST `/api/upload-video/nemo_agent/me/<sid>` — file: multipart `-F "files=@/path"`
Do not use sensitive, confidential, or regulated documents unless you trust the external provider and its data-handling terms.
The agent may continue the video-generation workflow based on instructions returned by the backend, such as exporting or querying state.
The skill tells the agent to translate backend GUI-style responses into API actions. This appears intended for automating the cloud workflow, but it means remote service responses can drive additional service API calls.
Backend says "click [button]" / "点击" | Execute via API
Watch for unexpected actions, especially exports or credit-consuming generation steps, and ask the agent to confirm before performing actions that may cost credits or upload additional files.
It may be harder to independently verify who operates the skill or review its service documentation.
The artifact provides no homepage or known source for the skill. There is no local code or install step, so this is a provenance note rather than evidence of malicious behavior.
Source: unknown; Homepage: none
Install only if you trust the registry listing and the external NemoVideo API endpoint used by the skill.